diff --git a/.github/actions/trivy-scan/action.yml b/.github/actions/trivy-scan/action.yml index 7a9b2891a..7bc36433f 100644 --- a/.github/actions/trivy-scan/action.yml +++ b/.github/actions/trivy-scan/action.yml @@ -6,13 +6,9 @@ inputs: runs: using: "composite" steps: - - name: Install Trivy - run: | - wget https://github.com/aquasecurity/trivy/releases/download/v0.44.1/trivy_0.44.1_Linux-64bit.deb - sudo dpkg -i trivy_0.44.1_Linux-64bit.deb - shell: bash - - - name: Scan image - run: | - trivy image --severity HIGH,CRITICAL --no-progress ${{ inputs.image }} - shell: bash + - name: Run Trivy vulnerability scanner + uses: aquasecurity/trivy-action@d2472f4cfe2bfe3bc99e7cfc9a6c4c2df6dd3b15 # v0.35.0 + with: + image-ref: ${{ inputs.image }} + format: "table" + severity: "HIGH,CRITICAL"